StackRadar

devtron-operator 0.23.3 Helm chart

romholdings

Scored 15 Sept 2026

Chart to configure and install Devtron. Devtron is a Kubernetes Orchestration system.

Version 0.23.3 1 month agodeploys tag c7b89667-690-39290 0Artifact Hub

devtron-operator 0.23.3 deploys 11 container images: quay.io/devtron/dashboard, quay.io/devtron/authenticator, quay.io/devtron/dex, quay.io/devtron/kubelink and 7 more. Across them, 2,876 findings — 5 critical, 45 high — 9 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.80.0-r6, fixed in 8.4.0-r0.

Radar Score

31,4475453952,429

2,876 findings over 11 of 11 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images
ImageTagVulnerabilitiesRadar Score
quay.io/devtron/dashboardc7b89667-690-3929000526327
quay.io/devtron/authenticatore414faff-393-13273211391572,967
quay.io/devtron/dexv2.30.209381892,989
quay.io/devtron/kubelink09867a9c-564-3928900182132,007
quay.io/devtron/postgres×214.903513694,363
quay.io/devtron/postgres_exporterv0.10.103221471,874
quay.io/devtron/kubectl×2latest29652293,948
quay.io/devtron/chart-sync×23b3d6d0e-836-3929600182101,985
quay.io/devtron/devtron-utilsdup-chart-repo-v1.1.014885316,791
quay.io/devtron/hyperion×20874dcaf-280-3928700222262,219
quay.io/devtron/migrator×2v4.16.206291321,977

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,056 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2023-31486perl@5.36.0-7no fix listed
LowUBUNTU-CVE-2026-42250bzip2@1.0.8-5.1build0.11.0.8-5.1ubuntu0.1
LowDEBIAN-CVE-2024-2379curl@7.88.1-10+deb12u4no fix listed
LowUBUNTU-CVE-2025-9820gnutls28@3.8.3-1.1ubuntu3.23.8.3-1.1ubuntu3.5
LowDEBIAN-CVE-2025-61984openssh@1:9.2p1-2+deb12u11:9.2p1-2+deb12u8
LowGO-2026-4602stdlib@go1.25.01.25.8
LowALPINE-CVE-2023-2602libcap@2.64-r02.64-r1
LowUBUNTU-CVE-2026-27456util-linux@2.39.3-9ubuntu6.22.39.3-9ubuntu6.6
LowUBUNTU-CVE-2026-18508tar@1.35+dfsg-3build1no fix listed
LowDEBIAN-CVE-2025-68972gnupg2@2.2.40-1.1no fix listed
LowDEBIAN-CVE-2026-0992libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u6
LowUBUNTU-CVE-2026-41990libgcrypt20@1.10.3-2build11.12.0-2ubuntu0.1~Fips1~rc11
LowGHSA-37cx-329c-33x3github.com/go-git/go-git/v5@v5.13.25.16.5
LowUBUNTU-CVE-2026-89160pcre2@10.42-4ubuntu2no fix listed
LowGO-2026-5622github.com/containerd/containerd@v1.7.30no fix listed
LowDEBIAN-CVE-2026-4519python3.11@3.11.2-63.11.2-6+deb12u8
LowDEBIAN-CVE-2026-90803binutils@2.40-2no fix listed
LowDEBIAN-CVE-2026-90804binutils@2.40-2no fix listed
LowDEBIAN-CVE-2025-32728openssh@1:9.2p1-2+deb12u11:9.2p1-2+deb12u6
LowGHSA-xg2h-wx96-xgxrgithub.com/Masterminds/goutils@v1.1.01.1.1
LowUBUNTU-CVE-2022-3219gnupg2@2.4.4-2ubuntu17no fix listed
LowALPINE-CVE-2023-25815git@2.34.7-r02.34.8-r0
LowDEBIAN-CVE-2026-41080expat@2.5.0-1no fix listed
LowDEBIAN-CVE-2024-26461krb5@1.20.1-2+deb12u1no fix listed
LowDEBIAN-CVE-2023-40403libxslt@1.1.35-11.1.35-1+deb12u2
LowDEBIAN-CVE-2025-1181binutils@2.40-2no fix listed
LowDEBIAN-CVE-2026-90802binutils@2.40-2no fix listed
LowDEBIAN-CVE-2025-1180binutils@2.40-2no fix listed
LowDEBIAN-CVE-2025-11731libxslt@1.1.35-1no fix listed
LowDEBIAN-CVE-2024-31852llvm-toolchain-14@1:14.0.6-12no fix listed
LowDEBIAN-CVE-2025-69418openssl@3.0.11-1~deb12u23.0.18-1~deb12u2
LowDEBIAN-CVE-2007-5686shadow@1:4.13+dfsg1-1+b1no fix listed
LowDEBIAN-CVE-2025-1795python3.11@3.11.2-63.11.2-6+deb12u6
LowDEBIAN-CVE-2025-1151binutils@2.40-2no fix listed
LowGO-2026-5024golang.org/x/sys@v0.42.00.44.0
LowDEBIAN-CVE-2025-1182binutils@2.40-2no fix listed
LowDEBIAN-CVE-2023-1972binutils@2.40-2no fix listed
LowUBUNTU-CVE-2026-59846libssh@0.10.6-2ubuntu0.40.10.6-2ubuntu0.5
LowGO-2026-6179golang.org/x/mod@v0.30.00.40.0
LowUBUNTU-CVE-2026-18477tar@1.35+dfsg-3build1no fix listed
LowDEBIAN-CVE-2026-73281openssh@1:9.2p1-2+deb12u1no fix listed
LowGHSA-xjvp-4fhw-gc47github.com/opencontainers/runc@v1.1.01.3.6
LowDEBIAN-CVE-2024-26458krb5@1.20.1-2+deb12u1no fix listed
LowDSA-5979-2libxslt@1.1.35-11.1.35-1+deb12u3
LowGO-2022-1107github.com/docker/docker@v20.10.17+incompatible20.10.20+incompatible
LowGO-2023-2048github.com/cyphar/filepath-securejoin@v0.2.30.2.4
LowGO-2023-2153google.golang.org/grpc@v1.34.01.56.3
LowGO-2023-2412github.com/containerd/containerd@v1.6.61.6.26
LowGO-2024-2567github.com/jackc/pgx/v5@v5.3.15.5.2
LowGO-2024-3344filippo.io/age@v1.0.0-beta71.2.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.23.3latest1 month agoc7b89667-690-392905453952,42931,447

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/romholdings/devtron-operator.svg)](https://charts.stackradar.io/charts/romholdings/devtron-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.